General

  • Target

    e0610aa44464c319ed8575f7e396ed50a4e626c80cde289d21855a777a32fc91

  • Size

    51KB

  • Sample

    240613-xf8flasblm

  • MD5

    d53e57c8788c3a32ae71e1332c6f9f32

  • SHA1

    b63ab08b50cb5c420e7ec324307a67e4cec6bfca

  • SHA256

    e0610aa44464c319ed8575f7e396ed50a4e626c80cde289d21855a777a32fc91

  • SHA512

    44cc28826e245e2dccfa5e0a6c88b735c2a8c30f59bb9513ee5d4a4d5316d8b5509fd6c5473775f284ce9a7509f95a99668ae4960816564a4b8ef17f5d9e35f3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fbo4JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e0610aa44464c319ed8575f7e396ed50a4e626c80cde289d21855a777a32fc91

    • Size

      51KB

    • MD5

      d53e57c8788c3a32ae71e1332c6f9f32

    • SHA1

      b63ab08b50cb5c420e7ec324307a67e4cec6bfca

    • SHA256

      e0610aa44464c319ed8575f7e396ed50a4e626c80cde289d21855a777a32fc91

    • SHA512

      44cc28826e245e2dccfa5e0a6c88b735c2a8c30f59bb9513ee5d4a4d5316d8b5509fd6c5473775f284ce9a7509f95a99668ae4960816564a4b8ef17f5d9e35f3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fbo4JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks